General

  • Target

    0d78adeb5428c3709818b25d01568cefea022c59c0f474b13572fdee7a24128a

  • Size

    412KB

  • Sample

    241110-vjdz2strap

  • MD5

    eee1d6ded3fd33531e8ed3bc0ef0b83f

  • SHA1

    b35d1b32b7657ca110c8e08be7985d9ceb5cb1b4

  • SHA256

    0d78adeb5428c3709818b25d01568cefea022c59c0f474b13572fdee7a24128a

  • SHA512

    5550d5e264a512cbfad826a17787b6431672544961c6537120267d6b4b0e0c52dcd8857533bc25f4cfe48b1329b618d55af78e70af64711c3ee73ffa7c76eeae

  • SSDEEP

    6144:vyjNdQnaQpGBUGqsGtma7DDvEmULKra3jBaxdq7qLdXysqZ:6jrQpGmNRtmOnv/UOrIBaxdli

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      0d78adeb5428c3709818b25d01568cefea022c59c0f474b13572fdee7a24128a

    • Size

      412KB

    • MD5

      eee1d6ded3fd33531e8ed3bc0ef0b83f

    • SHA1

      b35d1b32b7657ca110c8e08be7985d9ceb5cb1b4

    • SHA256

      0d78adeb5428c3709818b25d01568cefea022c59c0f474b13572fdee7a24128a

    • SHA512

      5550d5e264a512cbfad826a17787b6431672544961c6537120267d6b4b0e0c52dcd8857533bc25f4cfe48b1329b618d55af78e70af64711c3ee73ffa7c76eeae

    • SSDEEP

      6144:vyjNdQnaQpGBUGqsGtma7DDvEmULKra3jBaxdq7qLdXysqZ:6jrQpGmNRtmOnv/UOrIBaxdli

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks